CVE-2018-20806: Phamm

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter).

Affected products

• Phamm Phamm: version 0.6.8 only

Published 2019-03-17. Last modified 2026-06-17.